docker-compose.yml

services:
  traefik:
    image: traefik:v3.5.2
    restart: unless-stopped
    networks:
      - traefik
    environment:
      - HTPASSWD=${HTPASSWD}
      - DOMAIN=${DOMAIN}
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./letsencrypt:/letsencrypt
      - ./config.toml:/etc/traefik/config.toml:ro
      - ./config-template.toml:/etc/traefik/config-template.toml:ro
    command: >
      --configFile=/etc/traefik/config.toml

  hello:
    image: crccheck/hello-world
    restart: unless-stopped
    networks:
      - traefik
    labels:
      - traefik.enable=true
      - traefik.http.services.hello.loadbalancer.server.port=8000
      - traefik.http.routers.hello.rule=Host(`hello.${DOMAIN}`) || Host(`hello.localhost`)
      - traefik.http.routers.hello.tls=true
      - traefik.http.routers.hello.entrypoints=https
      - traefik.http.routers.hello.tls.certResolver=tls

networks:
  traefik:
    external: true